$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa File: 0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa (raw, json) Hash identifier: Br/m6bDrUIjwFJ0oEx1V32MLTeH3hjMl1E3X9HkseRM= Subject key identifier: 11:3B:27:91:39:3A:D4:A8:8B:85:D3:EA:0F:40:A1:C5:87:88:68:16 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285849A4BA4D85CE9C90ACBC369B80 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 33322 IP address blocks: 72.1.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4d:85:ce:9c:90:ac:bc:36:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=31b5b6f3-c544-469d-ba46-2dda35a3609d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:9b:99:4a:05:7d:b1:c3:51:86:ce:48:4d: a8:37:b4:39:9a:fd:77:ec:35:22:36:a8:14:d9:0a: 5d:3a:3d:e2:44:d7:48:49:cb:1e:21:01:ee:cc:d5: 32:80:7d:ec:cf:67:8e:0f:c7:b3:3d:8e:36:bd:ac: 01:53:17:7b:e9:0b:ca:3f:7b:de:2f:1a:12:be:a1: de:de:b8:9e:a4:88:b8:e4:64:cf:36:b8:b7:7d:f9: ce:6f:3c:57:56:ca:c6:47:bd:8f:40:db:5f:fa:6c: eb:cb:72:15:58:7a:89:01:2f:04:ba:cf:7f:2b:d7: 6f:d9:7c:39:8d:d0:bc:8b:d2:63:ba:75:bc:8c:bb: b4:f2:be:04:ac:88:67:e1:21:56:3c:a1:b7:2a:b2: 28:e7:e3:80:91:63:02:49:3a:e8:91:4e:8b:b5:e1: 76:cf:86:78:4b:69:65:8f:58:88:ff:73:ec:d1:1d: b0:37:f1:d9:e6:98:1d:5d:9b:e7:52:c5:05:4b:35: 34:db:01:12:0c:0b:55:20:9b:84:47:50:39:84:b0: b1:ed:50:27:73:0a:9f:56:56:70:c4:eb:fb:d3:93: b9:f1:45:01:da:21:49:c8:45:f3:7b:d8:13:19:73: 05:e7:21:28:5a:8b:30:b9:2e:32:a9:db:22:69:70: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3B:27:91:39:3A:D4:A8:8B:85:D3:EA:0F:40:A1:C5:87:88:68:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 72.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d2:6a:d7:01:40:be:5b:c8:71:f5:3c:44:16:4d:e7:8a:5f: 5a:27:c9:51:c3:2b:2e:6e:7b:93:f5:22:84:6e:f5:b0:51:1e: 64:a6:34:2f:ee:cf:6f:88:ab:9c:b8:bc:8c:71:b5:fb:eb:33: e0:1e:2a:69:03:f9:10:80:dd:61:32:bb:af:fb:d6:7d:1c:eb: 0c:ba:fc:3a:d5:20:c6:bb:38:ef:fc:03:df:5e:fc:37:16:da: a2:a5:7f:46:18:ff:21:60:39:c9:45:7a:0a:de:60:9f:52:9b: 8c:15:0c:d9:5e:a1:bb:77:f1:08:22:57:94:d7:77:fd:18:0f: e9:79:e7:6c:8b:f2:15:bb:48:3b:6b:cb:9f:5e:f4:c3:87:f2: 3f:15:d3:90:36:be:f2:cc:78:02:29:bf:1a:fa:cd:e7:cd:01: b9:28:e7:d7:0f:3e:2f:5d:31:a1:a1:55:81:7f:78:e6:79:2b: 0c:ae:68:1e:d7:1f:fa:f7:47:90:6f:7b:b3:17:c9:4a:b3:c5: e3:5c:51:c1:2e:67:5a:db:a5:8d:a8:e1:c4:aa:d5:4b:1e:99: f7:c4:8d:8f:86:79:72:fb:6b:6d:6f:bb:b2:c0:42:67:fc:c3: 1b:e3:11:2c:79:52:0e:09:8e:d6:74:41:da:b6:67:ed:0f:d7: 6c:cc:46:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk2FzpyQrLw2m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzFiNWI2ZjMtYzU0NC00NjlkLWJhNDYtMmRkYTM1YTM2MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprGbmUoFfbHDUYbOSE2oN7Q5mv137DUiNqgU 2QpdOj3iRNdIScseIQHuzNUygH3sz2eOD8ezPY42vawBUxd76QvKP3veLxoSvqHe 3riepIi45GTPNri3ffnObzxXVsrGR72PQNtf+mzry3IVWHqJAS8Eus9/K9dv2Xw5 jdC8i9JjunW8jLu08r4ErIhn4SFWPKG3KrIo5+OAkWMCSTrokU6LteF2z4Z4S2ll j1iI/3Ps0R2wN/HZ5pgdXZvnUsUFSzU02wESDAtVIJuER1A5hLCx7VAncwqfVlZw xOv705O58UUB2iFJyEXze9gTGXMF5yEoWoswuS4yqdsiaXCuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE7J5E5OtSoi4XT6g9AocWHiGgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMGRlOGE5ZWMtYmZjNC0z ZTgwLWI4ZmEtNjdkNzhiNWIxODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXSatcBQL5byHH1PEQWTeeKX1onyVHDKy5ue5P1IoRu9bBRHmSmNC/u z2+Iq5y4vIxxtfvrM+AeKmkD+RCA3WEyu6/71n0c6wy6/DrVIMa7OO/8A99e/DcW 2qKlf0YY/yFgOclFegreYJ9Sm4wVDNleobt38QgiV5TXd/0YD+l552yL8hW7SDtr y59e9MOH8j8V05A2vvLMeAIpvxr6zefNAbko59cPPi9dMaGhVYF/eOZ5KwyuaB7X H/r3R5Bve7MXyUqzxeNcUcEuZ1rbpY2o4cSq1UsemffEjY+GeXL7a21vu7LAQmf8 wxvjESx5Ug4JjtZ0Qdq2Z+0P12zMRvE= -----END CERTIFICATE-----Generated at Wed Apr 30 05:49:37 2025 by rpki-client